[ 57.863555][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.882971][ T90] device veth1_macvtap left promiscuous mode [ 57.889722][ T90] device veth0_macvtap left promiscuous mode [ 57.896565][ T90] device veth1_vlan left promiscuous mode [ 57.902632][ T90] device veth0_vlan left promiscuous mode [ 58.045771][ T90] team0 (unregistering): Port device team_slave_1 removed [ 58.061328][ T90] team0 (unregistering): Port device team_slave_0 removed [ 58.075838][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.093692][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.149288][ T90] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. [ 74.007726][ T4056] vhci_hcd vhci_hcd.0: rh_queue_status: len 2 maxch 8 tblen 4 [ 74.021242][ T4061] usb usb9: opened by process 4061: syz-executor133 [ 74.023394][ T4062] usb usb9: opened by process 4062: syz-executor133 [ 74.028443][ T4063] usb usb9: opened by process 4063: syz-executor133 [ 74.038928][ T4064] usb usb9: opened by process 4064: syz-executor133 [ 74.043155][ T4056] usb usb9: opened by process 4056: syz-executor133 [ 74.051198][ T4065] usb usb9: opened by process 4065: syz-executor133 [ 74.077033][ T4061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 74.082173][ T4065] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 74.083827][ T4061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.090323][ T4065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.098672][ T4062] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 74.106421][ T4056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 74.112410][ T4062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.118903][ T4056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.132018][ T4061] vhci_hcd vhci_hcd.0: Device attached [ 74.139912][ T4061] usb usb9: opened by process 4061: syz-executor133 [ 74.147208][ T4056] vhci_hcd vhci_hcd.0: Device attached [ 74.147790][ T4063] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 74.153226][ T4056] usb usb9: opened by process 4056: syz-executor133 [ 74.159183][ T4063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.159375][ T4064] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 74.166913][ T4056] usb usb9: usbdev_do_ioctl: BULK [ 74.173342][ T4064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.175056][ T4062] vhci_hcd vhci_hcd.0: Device attached [ 74.180597][ T4056] usb usb9: usbfs: process 4056 (syz-executor133) did not claim interface 0 before use [ 74.194776][ T4063] vhci_hcd vhci_hcd.0: Device attached [ 74.201361][ T4064] vhci_hcd vhci_hcd.0: Device attached [ 74.215616][ T4061] usb usb9: usbdev_do_ioctl: BULK [ 74.221182][ T4065] vhci_hcd vhci_hcd.0: Device attached [ 74.227737][ T4061] usb usb9: usbfs: process 4061 (syz-executor133) did not claim interface 0 before use [ 74.240671][ T3616] vhci_hcd vhci_hcd.2: rh_queue_status: len 2 maxch 8 tblen 4 [ 74.249537][ T4062] usb usb9: opened by process 4062: syz-executor133 [ 74.249561][ T4063] usb usb9: opened by process 4063: syz-executor133 [ 74.263867][ T4071] vhci_hcd: connection closed [ 74.266593][ T4065] usb usb9: opened by process 4065: syz-executor133 [ 74.267382][ T4064] usb usb9: opened by process 4064: syz-executor133 [ 74.271409][ T90] vhci_hcd: stop threads [ 74.285448][ T4062] usb usb9: usbdev_do_ioctl: BULK [ 74.295950][ T4062] usb usb9: usbfs: process 4062 (syz-executor133) did not claim interface 0 before use [ 74.300482][ T90] vhci_hcd: release socket [ 74.306444][ T4062] usb usb9: ep1 int-in, length 1, timeout 9 [ 74.310399][ T7] vhci_hcd vhci_hcd.1: rh_queue_status: len 2 maxch 8 tblen 4 [ 74.324468][ T3268] vhci_hcd vhci_hcd.3: rh_queue_status: len 2 maxch 8 tblen 4 [ 74.331971][ T1157] vhci_hcd vhci_hcd.4: rh_queue_status: len 2 maxch 8 tblen 4 [ 74.339694][ T3617] vhci_hcd vhci_hcd.5: rh_queue_status: len 2 maxch 8 tblen 4 [ 74.347465][ T90] vhci_hcd: disconnect device [ 74.351484][ T4062] vhci_hcd vhci_hcd.0: rh_queue_status: len 1 maxch 0 tblen 1 [ 74.352989][ T4065] usb usb9: usbdev_do_ioctl: BULK [ 74.361279][ C1] vhci_hcd vhci_hcd.0: poll_rh_status: len 2 maxch 0 tblen 1 [ 74.370350][ T4072] vhci_hcd: connection closed [ 74.377939][ C1] ================================================================== [ 74.391552][ C1] BUG: KASAN: slab-out-of-bounds in usb_hcd_poll_rh_status+0x5f4/0x780 [ 74.399814][ C1] Write of size 2 at addr ffff88801da403c0 by task syz-executor133/4062 [ 74.408158][ C1] [ 74.410497][ C1] CPU: 1 PID: 4062 Comm: syz-executor133 Not tainted 5.16.0-rc7-syzkaller #0 [ 74.419601][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.429926][ C1] Call Trace: [ 74.433212][ C1] [ 74.436158][ C1] dump_stack_lvl+0xcd/0x134 [ 74.440773][ C1] print_address_description.constprop.0.cold+0x8d/0x320 [ 74.448060][ C1] ? usb_hcd_poll_rh_status+0x5f4/0x780 [ 74.453920][ C1] ? usb_hcd_poll_rh_status+0x5f4/0x780 [ 74.459731][ C1] kasan_report.cold+0x83/0xdf [ 74.464535][ C1] ? _raw_spin_lock_nest_lock+0x31/0x40 [ 74.470273][ C1] ? usb_hcd_poll_rh_status+0x5f4/0x780 [ 74.475836][ C1] kasan_check_range+0x13d/0x180 [ 74.481297][ C1] memcpy+0x39/0x60 [ 74.485217][ C1] usb_hcd_poll_rh_status+0x5f4/0x780 [ 74.490713][ C1] ? usb_hcd_resume_root_hub+0x140/0x140 [ 74.496360][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 74.501915][ C1] call_timer_fn+0x1a5/0x6b0 [ 74.506501][ C1] ? add_timer_on+0x4a0/0x4a0 [ 74.511293][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 74.517683][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.523316][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 74.529017][ C1] __run_timers.part.0+0x67c/0xa30 [ 74.534148][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 74.539033][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 74.544234][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 74.549087][ C1] run_timer_softirq+0xb3/0x1d0 [ 74.554137][ C1] __do_softirq+0x29b/0x9c2 [ 74.558747][ C1] __irq_exit_rcu+0x123/0x180 [ 74.563430][ C1] irq_exit_rcu+0x5/0x20 [ 74.567756][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 74.573506][ C1] [ 74.576606][ C1] [ 74.579576][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 74.585587][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 74.592025][ C1] Code: 74 24 10 e8 ca db 15 f8 48 89 ef e8 82 51 16 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 c3 1b 09 f8 65 8b 05 dc a0 bb 76 85 c0 74 0a 5b 5d c3 e8 f0 02 [ 74.612671][ C1] RSP: 0018:ffffc9000289f8b0 EFLAGS: 00000206 [ 74.618962][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1b22579 [ 74.627127][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 74.636094][ C1] RBP: ffffffff8ca3bc60 R08: 0000000000000001 R09: 0000000000000001 [ 74.644224][ C1] R10: ffffffff817dd258 R11: 0000000000000000 R12: ffff88801d9a7d40 [ 74.652463][ C1] R13: ffff888147c88000 R14: ffff888147c88180 R15: 0000000000000000 [ 74.660632][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 74.665776][ C1] usb_hcd_submit_urb+0x15ac/0x2390 [ 74.670984][ C1] ? try_to_wake_up+0x560/0x15a0 [ 74.675938][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 74.680800][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 74.685984][ C1] ? usb_add_hcd+0x2c0/0x2c0 [ 74.690594][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 74.696436][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 74.701653][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 74.707630][ C1] ? try_to_wake_up+0xfc/0x15a0 [ 74.712497][ C1] usb_submit_urb+0x86d/0x18a0 [ 74.717263][ C1] ? lockdep_init_map_type+0x243/0x7b0 [ 74.722894][ C1] usbfs_start_wait_urb+0x128/0x3d0 [ 74.728091][ C1] ? __mutex_unlock_slowpath+0x218/0x5e0 [ 74.733709][ C1] ? usbfs_blocking_completion+0x40/0x40 [ 74.739337][ C1] ? memset+0x20/0x40 [ 74.743329][ C1] do_proc_bulk+0x535/0xba0 [ 74.747857][ C1] ? processcompl_compat+0x680/0x680 [ 74.753153][ C1] usbdev_ioctl+0x586/0x36c0 [ 74.757739][ C1] ? do_proc_control+0xdd0/0xdd0 [ 74.762838][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 74.768760][ C1] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 74.775019][ C1] ? do_vfs_ioctl+0x132/0x15d0 [ 74.779786][ C1] ? vfs_fileattr_set+0xbe0/0xbe0 [ 74.785160][ C1] ? find_held_lock+0x2d/0x110 [ 74.789922][ C1] ? dump_pagetable.cold+0xc8/0x3d4 [ 74.795119][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 74.799959][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 74.805070][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.811654][ C1] ? do_proc_control+0xdd0/0xdd0 [ 74.816581][ C1] __x64_sys_ioctl+0x193/0x200 [ 74.821336][ C1] do_syscall_64+0x35/0xb0 [ 74.825739][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.831635][ C1] RIP: 0033:0x7fecb7004799 [ 74.836045][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.855655][ C1] RSP: 002b:00007fffb13c1078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.864078][ C1] RAX: ffffffffffffffda RBX: 00007fecb7048098 RCX: 00007fecb7004799 [ 74.872247][ C1] RDX: 0000000020000240 RSI: 00000000c0185502 RDI: 0000000000000006 [ 74.880330][ C1] RBP: 00007fffb13c10a0 R08: 00007fffb13c0af0 R09: 0000000000000000 [ 74.888484][ C1] R10: 000000000000ffff R11: 0000000000000246 R12: 00007fecb6fc3770 [ 74.896461][ C1] R13: 0000000000000000 R14: 00007fffb13c10a0 R15: 00007fffb13c1090 [ 74.905219][ C1] [ 74.908226][ C1] [ 74.910535][ C1] Allocated by task 4062: [ 74.914846][ C1] kasan_save_stack+0x1e/0x50 [ 74.919604][ C1] __kasan_kmalloc+0xa9/0xd0 [ 74.926289][ C1] do_proc_bulk+0x2fc/0xba0 [ 74.930777][ C1] usbdev_ioctl+0x586/0x36c0 [ 74.935369][ C1] __x64_sys_ioctl+0x193/0x200 [ 74.940383][ C1] do_syscall_64+0x35/0xb0 [ 74.944870][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.950853][ C1] [ 74.953160][ C1] The buggy address belongs to the object at ffff88801da403c0 [ 74.953160][ C1] which belongs to the cache kmalloc-8 of size 8 [ 74.967360][ C1] The buggy address is located 0 bytes inside of [ 74.967360][ C1] 8-byte region [ffff88801da403c0, ffff88801da403c8) [ 74.980574][ C1] The buggy address belongs to the page: [ 74.986193][ C1] page:ffffea0000769000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1da40 [ 74.996342][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 75.003894][ C1] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888010c41280 [ 75.012769][ C1] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 75.021491][ C1] page dumped because: kasan: bad access detected [ 75.028079][ C1] page_owner tracks the page as allocated [ 75.034073][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 2973, ts 21401832644, free_ts 18932450065 [ 75.050866][ C1] get_page_from_freelist+0xa72/0x2f50 [ 75.056557][ C1] __alloc_pages+0x1b2/0x500 [ 75.061135][ C1] alloc_pages+0x1a7/0x300 [ 75.066260][ C1] new_slab+0x32d/0x4a0 [ 75.070547][ C1] ___slab_alloc+0x918/0xfe0 [ 75.075130][ C1] __slab_alloc.constprop.0+0x4d/0xa0 [ 75.080577][ C1] __kmalloc+0x2fb/0x340 [ 75.084991][ C1] kernfs_fop_write_iter+0x231/0x500 [ 75.090261][ C1] new_sync_write+0x429/0x660 [ 75.095272][ C1] vfs_write+0x7cd/0xae0 [ 75.099510][ C1] ksys_write+0x12d/0x250 [ 75.103821][ C1] do_syscall_64+0x35/0xb0 [ 75.108225][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.114210][ C1] page last free stack trace: [ 75.118864][ C1] free_pcp_prepare+0x374/0x870 [ 75.123790][ C1] free_unref_page+0x19/0x690 [ 75.128631][ C1] kasan_depopulate_vmalloc_pte+0x5c/0x70 [ 75.134515][ C1] __apply_to_page_range+0x686/0x1030 [ 75.139974][ C1] kasan_release_vmalloc+0xa7/0xc0 [ 75.145067][ C1] __purge_vmap_area_lazy+0x8f9/0x1c50 [ 75.150571][ C1] _vm_unmap_aliases.part.0+0x3f0/0x500 [ 75.156101][ C1] vm_unmap_aliases+0x45/0x50 [ 75.160776][ C1] change_page_attr_set_clr+0x241/0x500 [ 75.166310][ C1] set_memory_nx+0xb2/0x110 [ 75.170804][ C1] free_init_pages+0x73/0xc0 [ 75.175377][ C1] kernel_init+0x2e/0x1d0 [ 75.179690][ C1] ret_from_fork+0x1f/0x30 [ 75.184091][ C1] [ 75.186548][ C1] Memory state around the buggy address: [ 75.192421][ C1] ffff88801da40280: fb fc fc fc fc fb fc fc fc fc fb fc fc fc fc fa [ 75.202268][ C1] ffff88801da40300: fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc [ 75.210856][ C1] >ffff88801da40380: fc fc fc 00 fc fc fc fc 01 fc fc fc fc fb fc fc [ 75.218899][ C1] ^ [ 75.225034][ C1] ffff88801da40400: fc fc fb fc fc fc fc fb fc fc fc fc fb fc fc fc [ 75.233258][ C1] ffff88801da40480: fc fb fc fc fc fc fa fc fc fc fc fb fc fc fc fc [ 75.241450][ C1] ================================================================== [ 75.249602][ C1] Disabling lock debugging due to kernel taint [ 75.256044][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 75.262963][ C1] CPU: 1 PID: 4062 Comm: syz-executor133 Tainted: G B 5.16.0-rc7-syzkaller #0 [ 75.273105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.283227][ C1] Call Trace: [ 75.286562][ C1] [ 75.289401][ C1] dump_stack_lvl+0xcd/0x134 [ 75.293999][ C1] panic+0x2b0/0x6dd [ 75.297882][ C1] ? __warn_printk+0xf3/0xf3 [ 75.302477][ C1] ? usb_hcd_poll_rh_status+0x5f4/0x780 [ 75.308013][ C1] ? usb_hcd_poll_rh_status+0x5f4/0x780 [ 75.313566][ C1] end_report.cold+0x63/0x6f [ 75.318338][ C1] kasan_report.cold+0x71/0xdf [ 75.323460][ C1] ? _raw_spin_lock_nest_lock+0x31/0x40 [ 75.329293][ C1] ? usb_hcd_poll_rh_status+0x5f4/0x780 [ 75.334848][ C1] kasan_check_range+0x13d/0x180 [ 75.339786][ C1] memcpy+0x39/0x60 [ 75.343584][ C1] usb_hcd_poll_rh_status+0x5f4/0x780 [ 75.349067][ C1] ? usb_hcd_resume_root_hub+0x140/0x140 [ 75.355351][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 75.361010][ C1] call_timer_fn+0x1a5/0x6b0 [ 75.365772][ C1] ? add_timer_on+0x4a0/0x4a0 [ 75.370444][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 75.375379][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.380828][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 75.386364][ C1] __run_timers.part.0+0x67c/0xa30 [ 75.391544][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 75.396513][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 75.401708][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 75.406543][ C1] run_timer_softirq+0xb3/0x1d0 [ 75.411376][ C1] __do_softirq+0x29b/0x9c2 [ 75.415870][ C1] __irq_exit_rcu+0x123/0x180 [ 75.420544][ C1] irq_exit_rcu+0x5/0x20 [ 75.425030][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 75.430821][ C1] [ 75.433735][ C1] [ 75.436645][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 75.442783][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 75.449277][ C1] Code: 74 24 10 e8 ca db 15 f8 48 89 ef e8 82 51 16 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 c3 1b 09 f8 65 8b 05 dc a0 bb 76 85 c0 74 0a 5b 5d c3 e8 f0 02 [ 75.470225][ C1] RSP: 0018:ffffc9000289f8b0 EFLAGS: 00000206 [ 75.476288][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1b22579 [ 75.484261][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 75.492215][ C1] RBP: ffffffff8ca3bc60 R08: 0000000000000001 R09: 0000000000000001 [ 75.500254][ C1] R10: ffffffff817dd258 R11: 0000000000000000 R12: ffff88801d9a7d40 [ 75.508220][ C1] R13: ffff888147c88000 R14: ffff888147c88180 R15: 0000000000000000 [ 75.516362][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 75.521383][ C1] usb_hcd_submit_urb+0x15ac/0x2390 [ 75.526702][ C1] ? try_to_wake_up+0x560/0x15a0 [ 75.531935][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 75.536973][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 75.541811][ C1] ? usb_add_hcd+0x2c0/0x2c0 [ 75.546476][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 75.552616][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 75.557799][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 75.563853][ C1] ? try_to_wake_up+0xfc/0x15a0 [ 75.568691][ C1] usb_submit_urb+0x86d/0x18a0 [ 75.573487][ C1] ? lockdep_init_map_type+0x243/0x7b0 [ 75.578932][ C1] usbfs_start_wait_urb+0x128/0x3d0 [ 75.584205][ C1] ? __mutex_unlock_slowpath+0x218/0x5e0 [ 75.589920][ C1] ? usbfs_blocking_completion+0x40/0x40 [ 75.595650][ C1] ? memset+0x20/0x40 [ 75.600155][ C1] do_proc_bulk+0x535/0xba0 [ 75.604916][ C1] ? processcompl_compat+0x680/0x680 [ 75.610195][ C1] usbdev_ioctl+0x586/0x36c0 [ 75.614769][ C1] ? do_proc_control+0xdd0/0xdd0 [ 75.619835][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 75.625748][ C1] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 75.632087][ C1] ? do_vfs_ioctl+0x132/0x15d0 [ 75.636855][ C1] ? vfs_fileattr_set+0xbe0/0xbe0 [ 75.641884][ C1] ? find_held_lock+0x2d/0x110 [ 75.646828][ C1] ? dump_pagetable.cold+0xc8/0x3d4 [ 75.652121][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 75.657047][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 75.661883][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.668202][ C1] ? do_proc_control+0xdd0/0xdd0 [ 75.673141][ C1] __x64_sys_ioctl+0x193/0x200 [ 75.677989][ C1] do_syscall_64+0x35/0xb0 [ 75.682406][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.688495][ C1] RIP: 0033:0x7fecb7004799 [ 75.692912][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.713029][ C1] RSP: 002b:00007fffb13c1078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.721533][ C1] RAX: ffffffffffffffda RBX: 00007fecb7048098 RCX: 00007fecb7004799 [ 75.729762][ C1] RDX: 0000000020000240 RSI: 00000000c0185502 RDI: 0000000000000006 [ 75.737802][ C1] RBP: 00007fffb13c10a0 R08: 00007fffb13c0af0 R09: 0000000000000000 [ 75.745754][ C1] R10: 000000000000ffff R11: 0000000000000246 R12: 00007fecb6fc3770 [ 75.753704][ C1] R13: 0000000000000000 R14: 00007fffb13c10a0 R15: 00007fffb13c1090 [ 75.762015][ C1] [ 76.848561][ C1] Shutting down cpus with NMI [ 76.853639][ C1] Kernel Offset: disabled [ 76.857955][ C1] Rebooting in 86400 seconds..